Question
A company deploys several model-driven apps. The company uses shared devices in their warehouse. The devices are always powered on. Users log on to the devices and then launch the apps to perform actions.
Unauthorized users recently uploaded several files after another user failed to log out of a device. The company needs to prevent these incidents from occurring in the future.
You need to configure the solution to prevent the reported security incidents.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Explanation
Prevent unauthorized access to devices.: Set a timeout in the Power Platform admin center. — In the environment's Settings > Product > Privacy + Security page, the Inactivity timeout setting automatically signs a user out of model-driven apps after a set period without activity, so an app session left open on an always-on shared warehouse device ends on its own. A group policy inactivity limit acts on the Windows session of the device, not on the app session; Azure Active Directory access controls decide who can sign in but do not end an idle session that is already open; and a Power Automate flow cannot detect inactivity on a device or sign users out of the apps.
Prevent users from uploading a specific type of file.: Enter the restricted file types in the Power Platform admin center. — The same Privacy + Security page has the Blocked attachments setting, where you list the file extensions that cannot be uploaded or downloaded as attachments in Dataverse. Entering only the allowed types would block every other type rather than the one specific type, and the SharePoint admin center controls files stored in SharePoint, not attachments uploaded through model-driven apps.
